now imagine we have this website

now let’s navigate to the admin panel

notice that the message said that the admin panel is avilable for local user

so let’s intercept the request

please notice the host header

now let me change it to localhost

now let’s me intercept the request again while deleting carlos

now let me change the host header to localhost

now send it

as we see we made it we deleted the user carlos